$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f5342ecb-711b-446c-8167-0d2a93e65bea.roa File: f5342ecb-711b-446c-8167-0d2a93e65bea.roa (raw, json) Hash identifier: aq9/1t7C/lEzxGH2WZmTmW9Z42FKoAjvb8Zmtis59ao= Subject key identifier: 91:72:0E:3D:ED:74:9C:A8:0C:79:0F:22:29:30:8A:44:23:6E:03:89 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 110E429FD32BDE9B5E4639E12F9C7ACB06FD3EAD Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f5342ecb-711b-446c-8167-0d2a93e65bea.roa Signing time: Mon 21 Jul 2025 16:30:19 +0000 ROA not before: Mon 21 Jul 2025 16:30:19 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:0e:42:9f:d3:2b:de:9b:5e:46:39:e1:2f:9c:7a:cb:06:fd:3e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 21 16:30:19 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=34f5c485e6e59f869711ed3ff936fe275466f5959695c3afaa52586c01438129, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:95:62:47:59:51:de:c7:83:0f:b2:60:8b:bf: 97:b2:0c:e4:db:ec:e1:11:5c:1c:6a:d8:19:4e:b7: 1f:3c:51:a4:a4:f2:ee:71:17:ba:a9:55:2e:ec:9e: 05:69:a7:18:fd:08:77:5f:4f:4a:be:d1:ae:6c:b8: a8:75:84:35:6b:13:07:57:ef:9c:65:c0:67:2c:73: 06:95:1d:8e:6c:75:b6:14:71:e0:c5:6c:43:a0:f1: 9d:e5:69:37:33:94:be:6f:f5:9e:db:c4:50:21:c7: fb:e4:f6:18:df:bf:86:1e:f2:5f:19:e2:4b:5f:39: b9:81:a8:97:a9:43:6b:f5:67:b9:5f:ea:a7:e1:cd: 37:9c:3a:15:e2:dd:36:78:96:30:15:58:2a:a8:59: 32:a0:df:d5:3e:f1:52:d0:f3:01:4b:e5:70:8f:98: a2:f9:cb:3c:99:b4:39:85:0b:16:d8:8c:18:17:50: ba:1e:ca:ae:fd:0c:f4:3e:16:8a:fd:33:9a:95:61: 73:b4:2c:42:17:a8:26:4b:69:22:41:b9:c5:e4:37: 9c:61:bb:ab:42:14:61:41:20:fd:7a:5f:8b:6d:f9: d6:ed:65:bd:ef:0e:72:e7:1d:57:bf:7c:8e:20:3d: 8e:b8:7c:a6:58:38:1c:05:74:7e:18:e1:c5:72:18: 9a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:72:0E:3D:ED:74:9C:A8:0C:79:0F:22:29:30:8A:44:23:6E:03:89 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f5342ecb-711b-446c-8167-0d2a93e65bea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c18::/48 Signature Algorithm: sha256WithRSAEncryption 6c:91:81:bc:ef:0b:a6:0b:c9:eb:28:a0:cd:49:dc:97:49:21: ea:4f:dd:a5:e5:fe:45:01:88:d9:ab:7a:db:a5:e0:dd:60:87: 66:b1:fe:95:ee:37:0f:7d:c2:7f:69:53:20:99:29:14:bf:eb: 80:bb:03:3e:8d:37:53:95:14:34:92:22:4a:70:7d:ec:d7:70: ef:8d:96:f1:6d:ec:00:2e:fd:1a:8d:f6:3c:92:9f:29:77:e2: 46:57:f7:05:26:dd:ec:f3:50:89:03:4e:64:09:e0:5c:e7:69: bd:e0:a5:59:61:3d:4a:f5:a5:0d:46:92:7d:41:7d:a0:68:02: 42:2f:88:0d:d1:e8:07:b6:c0:dc:8f:64:f8:c1:cd:88:03:77: fa:49:e3:29:f3:75:21:30:d7:45:22:b8:1c:0b:ed:56:a3:f4: d7:1d:13:a2:67:30:0a:d8:d0:d3:22:69:f6:c8:65:5d:8c:6a: a3:04:81:55:d0:ea:b1:d6:cf:b6:df:5c:a1:9c:e1:68:1a:06: 51:f0:d2:bb:43:51:2b:25:72:a2:61:38:14:c6:83:77:fb:03: 18:1e:af:33:e8:8f:0d:a7:a9:21:64:89:c8:a8:66:09:b8:cf: 51:9d:ac:d7:fd:d0:38:2d:2d:5a:32:14:21:b6:95:33:e8:fb: d8:7a:f0:eb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEQ5Cn9Mr3pteRjnhL5x6ywb9Pq0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzIxMTYzMDE5WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNGY1YzQ4NWU2ZTU5Zjg2OTcxMWVkM2ZmOTM2ZmUyNzU0 NjZmNTk1OTY5NWMzYWZhYTUyNTg2YzAxNDM4MTI5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDzlWJHWVHex4MPsmCLv5eyDOTb7OERXBxq2BlOtx88UaSk 8u5xF7qpVS7sngVppxj9CHdfT0q+0a5suKh1hDVrEwdX75xlwGcscwaVHY5sdbYU ceDFbEOg8Z3laTczlL5v9Z7bxFAhx/vk9hjfv4Ye8l8Z4ktfObmBqJepQ2v1Z7lf 6qfhzTecOhXi3TZ4ljAVWCqoWTKg39U+8VLQ8wFL5XCPmKL5yzyZtDmFCxbYjBgX ULoeyq79DPQ+For9M5qVYXO0LEIXqCZLaSJBucXkN5xhu6tCFGFBIP16X4tt+dbt Zb3vDnLnHVe/fI4gPY64fKZYOBwFdH4Y4cVyGJpfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkXIOPe10nKgMeQ8iKTCKRCNuA4kwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Y1MzQyZWNiLTcxMWItNDQ2Yy04MTY3LTBkMmE5M2U2NWJlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBgwDQYJKoZIhvcNAQELBQADggEBAGyRgbzvC6YLyesooM1J3JdJ IepP3aXl/kUBiNmretul4N1gh2ax/pXuNw99wn9pUyCZKRS/64C7Az6NN1OVFDSS IkpwfezXcO+NlvFt7AAu/RqN9jySnyl34kZX9wUm3ezzUIkDTmQJ4Fznab3gpVlh PUr1pQ1Gkn1BfaBoAkIviA3R6Ae2wNyPZPjBzYgDd/pJ4ynzdSEw10UiuBwL7Vaj 9NcdE6JnMArY0NMiafbIZV2MaqMEgVXQ6rHWz7bfXKGc4WgaBlHw0rtDUSslcqJh OBTGg3f7AxgerzPojw2nqSFkicioZgm4z1GdrNf90DgtLVoyFCG2lTPo+9h68Os= -----END CERTIFICATE-----Generated at Thu Jul 24 04:51:06 2025 by rpki-client